Quantum Key Distribution over Probabilistic Quantum Repeaters 
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A feasible route towards implementing long-distance quantum key distribution (QKD) systems 
relies on probabilistic schemes for entanglement distribution and swapping as proposed in the work of 
Duan, Lukin, Cirac, and Zoller (DLCZ) [Nature 414, 413 (2001)]. Here, we calculate the conditional 
throughput and fidelity of entanglement for DLCZ quantum repeaters, by accounting for the DLCZ 
self-purification property, in the presence of multiple excitations in the ensemble memories as well 
as loss and other sources of inefficiency in the channel and measurement modules. We then use our 
results to find the generation rate of secure key bits for QKD systems that rely on DLCZ quantum 
repeaters. We compare the key generation rate per logical memory employed in the two cases of with 
and without a repeater node. We find the cross-over distance beyond which the repeater system 
outperforms the non-repeater one. That provides us with the optimum inter-node distancing in 
quantum repeater systems. We also find the optimal excitation probability at which the QKD rate 
peaks. Such an optimum probability, in most regimes of interest, is insensitive to the total distance. 

PACS numbers: 03.67.Bg, 03.67.Dd, 03.67.Hk, 42.50.Ex 



I. INTRODUCTION 



Among many emerging applications offered by quan- 
tum information science, quantum key distribution 
(QKD) is the only one that has received commercial at- 
tention, [1 , and may soon be publicly available [2 . The 
latter depends on our ability to reduce the cost of the sys- 
tem and to make it available, not only over short point- 
to-point links, but also over long-distance network con- 
nections. Long-distance quantum communication relies 
on quantum repeater systems, which, themselves, rely 
on a large number of quantum memory units with ef- 
ficient coupling to light and long coherence times [3HS]- 
The original proposal for quantum repeaters by Briegel et 
al. relies on performing high-fidelity quantum operations 
for entanglement swapping and purification [3^. In their 
scheme, the requirements for implementing quantum re- 
peaters are similar to those of a quantum computer. Nev- 
ertheless, recent progress in miniaturizing trapped-ion 
quantum systems [7] and in improving light-ion coupling 
[8 has made the prospects of this approach more promis- 
ing. In the meantime, and especially for QKD applica- 
tions, there is an alternative approach to building quan- 
tum repeaters, which, instead of using deterministic gates 
for measurement and purification, relies on probabilistic 
operations and post-measurement purification. This ap- 
proach, first proposed by Duan, Lukin, Cirac, and Zoller 
(termed DLCZ hereafter) for atomic-ensemble memories 
[9], is potentially simpler to implement and its underly- 
ing idea for entanglement distribution and swapping has 
been used and extended in numerous frameworks and 
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proposals for quantum repeaters p!Ol. In this paper, we 
analyze a single- hop DLCZ repeater system, by account- 
ing for path, measurement, and coupling loss effects as 
well as the multiple-excitation effect in ensembles. The 
latter is a fundamental source of error for such systems, 
and it has been fully taken into account in our analy- 
sis. We find the generation rate of secure key bits for the 
DLCZ QKD protocol in both cases of with and without 
an intermediate repeater node. By comparing the two 
results, we obtain architectural insights into how such 
quantum repeaters must be designed as functions of their 
various system parameters. 

One of the main features of the DLCZ-based proto- 
cols for entanglement distribution and connection is their 
ability to remove certain errors by post-measurement 
processing. These post measurements are commonly part 
of the application in hand, e.g., QKD, and not the en- 
tanglement generation scheme itself. As a result, the 
generated state at the end of the DLCZ entanglement- 
generation protocols is not necessarily highly entangled. 
This has been shown in theory [11 and experiment [12 
by, respectively, calculating and measuring the fidelity 
and the concurrence of entangled states obtained via a 
single-hop DLCZ repeater. To evaluate the performance 
of such systems in practice, it is important to include 
the post-measurement effect in our analysis. This has 
been achieved in two ways in our paper. First, by us- 
ing a general application-independent conditional mea- 
sure, and second, by looking at the specific case of QKD. 
In the first approach, we look at the conditional fidelity 
and the rate of generating entangled states in the DLCZ 
repeaters when we virtually assume that the generated 
state is non-vacuum. The vacuum state is the typical er- 
roneous outcome of the DLCZ repeater protocol, which 
can commonly be ruled out by post measurements. In the 



second approach, we employ the entangled states gener- 
ated by the DLCZ entanglement distribution or repeater 
protocol in a QKD setup and find its secure key gen- 
eration rate. The DLCZ QKD protocol effectively filters 
out most cases that reduce entanglement measures of the 
pre- measurement states. 

Our QKD rate analysis for quantum repeaters ad- 
dresses two important practical issues. First, we calcu- 
late the rate for a repeater setup that uses multiple quan- 
tum memories per node. Second, by using a normalized 
rate-per- memory measure, we include the cost factor in 
our analysis as quantum memories are the most precious 
constituents of the system. In a probabilistic setup such 
as DLCZ, an acceptable key generation rate can only be 
achieved if we employ a large number of memories in par- 
allel. Moreover, to achieve the maximum rate, the system 
resources must be successively employed in the process of 
entanglement distribution and connection to successively 
generate entangled states for use in the QKD protocol. 
Razavi et al. have studied these issues in a generic quan- 
tum repeater setup, and, here, we employ their results in 
the specific case of memories with sufficiently long coher- 
ence times [4]. 

We consider the original DLCZ protocol, with atomic 
ensembles as its quantum memories. We are not, how- 
ever, restricted to using this particular type of memory, 
and, in fact, both the DLCZ scheme, and hence our anal- 
ysis, can be applied to other types of memories that work 
on the basis of the collective enhancement of light-matter 
interaction [9 . As mentioned earlier, such memories 
must be employed in large numbers and demonstrate long 
coherence times. Recently, coherence times in excess of 5 
ms are demonstrated for cesium atoms in an atomic comb 
[13]. This is, in principle, sufficient to cover distances up 
to 1000 km, provided that a large number of logical mem- 
ories can be employed in parallel [4l. Atomic ensembles 
can potentially be used as multiple logical memories by 
applying/collecting light at /from different directions. 

The rest of this paper is organized as follows. In Sec.[ll| 
we describe the DLCZ protocols for entanglement distri- 
bution, entanglement swapping, and QKD. In Sec. Ill 
we first review the fidelity analysis given in [11 for the 
DLCZ scheme for entanglement distribution and, then, 
extend it to the case of DLCZ quantum repeaters. We 
compare the two cases in terms of their effective fidelity 
and throughput — the rate at which entangled states are 
created — assuming that a large number of memories are 
being used in parallel. Section [TV| compares the two sys- 
tems in terms of the generation rate of secure key bits in 
a QKD setup, and Sec. [V| concludes the paper. 



II. SYSTEM DESCRIPTION 
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FIG. 1: (Color online) (a) The DLCZ scheme for entangle- 
ment distribution between atomic ensembles A and B. The 
A-level atomic ensembles are coherently pumped such that the 
chance of driving more than one Raman transition in the two 
ensembles is low. The photons collected from such Raman 
transitions in a certain direction are then routed down to a 
midpoint, where a 50-50 beam splitter erases any which- way 
information. A single click on one, and only one, of pho- 
todetectors heralds entanglement between A and B. (b) The 
DLCZ scheme for quantum repeaters. In order to entangle 
ensembles A and B, at distance L, we first entangle Ah A' 
and BhB\ at distance L/2, using the scheme described in 
(a). We then use a 50-50 beam splitter and single-photon 
detectors to perform a partial Bell-state measurement on the 
photonic states retrieved from middle ensembles A' and B' . 
A click on one, and only one, of detectors heralds the success 
of entanglement swapping, (c) The DLCZ setup for quantum 
key distribution. Alice and Bob first create two entangled 
pairs of ensembles, ASzB and CSzD, using the DLCZ schemes 
described in (a) or (b). They perform QKD measurements 
by first converting the atomic states into photonic states, and 
then applying randomly chosen phase shifts, or 7r/2, to the 
optical modes before they interfere at 50-50 beam splitters. 
That would effectively simulate an entanglement-based QKD 
protocol. A click on detector D1/2 is associated with bit 1/0. 
In (a), the beam splitter with transmissivity 77 represents the 
path loss. In (b), the beam splitter with transmissivity r/c 
models the efficiency of the retrieval process. In (a) and (b), 
the beam splitter with transmissivity r/d represents the quan- 
tum efficiency of photodetectors, and, in (c), the beam splitter 
with transmissivity r]m = r/crid represents the total measure- 
ment efficiency. All schematically employed photodetectors in 
(a)-(c) have unity quantum efficiencies. Labels A" and B" in 
(b), and A\ B\ C\ and D' in (c) represent the optical modes 
entering these ideal detectors. 



The DLCZ scheme for entanglement distribution works 
as follows; see Fig.flla). Ensemble memories A and 5, at 
distance L, consist of atoms with A-level configurations, 
all initially in their ground states. By coherently pump- 



ing these atoms, some of them may undergo off-resonant 
Raman transitions that create anti-Stokes photons. The 
width and ampUtude of the pump is chosen such that 
the probabihty of one such transition, pci is close to zero, 
hence the number of anti-Stokes photons, in the direction 
of interest, does not commonly exceed one. The resulting 
photons are routed down towards a 50-50 beam splitter 
located halfway between A and B. The beam splitter 
erases any which-way information so that if, ideally, only 
one photon has been created at one of the ensembles, one 
and, at most, only one, of Di and D2 clicks. According 
to the DLCZ protocol, if only detector Dj^ j = 1,2, in 
Fig.jlja), clicks, A and B are heralded to be ideally in the 
Ben state |V^f ^%b = (|01)ab + (-1P|10)ab)/ A where 
\0)k is the ensemble ground state and \1)k = SI^\0)k 
is the symmetric collective excited state of ensemble 
K = A^B with S]^ being the corresponding creation op- 
erator [Hiini. 

The fundamental source of error in the above DLCZ 
scheme is the multiple excitation effect, in which more 
than one anti-Stokes photon are created. Multiple pho- 
tons passed through a lossy channel can reproduce an 
erroneous heralding event. This effect can be alleviated, 
to some extent, by using photon- number resolving de- 
tectors (PNRDs), rather than non-resolving photodetec- 
tors (NRPDs). One click at a PNRD implies that ex- 
actly one photon is observed whereas, one click at an 
NRPD implies that at least one photon has been de- 
tected. In our forthcoming analysis, we fully consider 
the multiple-excitation effect when either type of detec- 
tors is employed and compare the system performance in 
various scenarios. 

The 50-50 beam splitter together with the single pho- 
ton detectors in Fig. [ija) effectively perform a partial 
Bell-sate measurement (BSM) on the incoming photons; 
see Fig. [2] The DLCZ quantum repeater protocol uses 
this idea to distribute entanglement over longer dis- 
tances. Figure [ijb) shows the DLCZ repeater setup in 
which, we first entangle ensembles A&lA' and BhB' using 
the DLCZ entanglement distribution protocol. We then 
perform a partial BSM on the retrieved photons from the 
middle ensembles A' and B' ^ which, upon success, leaves 
A and B entangled. 

One major application for memories entangled via the 
DLCZ schemes for entanglement distribution and re- 
peater is the DLCZ QKD protocol. In this protocol, our 
two remote parties, Alice and Bob, first generate identi- 
cal entangled pairs, namely AB and CD^ over distance L; 
see Fig. flic). They then retrieve the photons in the four 
ensembles and perform a QKD measurement on these 
photons [14 . The measurement modules used for this 
purpose is similar to the BSM module in Fig. [2] with 
additional phase shift units whose phase values are ran- 
domly picked to be either or 7r/2. These phase shifts 
are being applied to the photons retrieved from ensem- 
bles C and D in Fig. [ijc). Alice and Bob repeat this 
experiment multiple times to create a raw key. After 
the sifting procedure, by which Alice and Bob specify 



the measurement events where they have both used the 
same phase shifts and have obtained at least one click on 
their respective detectors, they each obtain a sifted key 
by assigning bit one to their keys whenever only Dl has 
clicked on their side, and bit zero whenever only D2 has 
clicked. In the case of a double click, and only if NRPDs 
are being used, they assign bit zero or one, with equal 
probability, to their sifted keys. By using privacy am- 
plification and reconciliation techniques, Alice and Bob 
turn their sifted keys to a secure key, which can be used 
for encryption purposes. 

Throughout the paper, we assume that all setups in 
Fig. [1] are symmetric. In particular, we assume that 
the optical paths from ensembles to relevant detectors, 
in terms of accumulated phase and incurred loss, are 
identical. The retrieval efficiency, rjc^ the quantum ef- 
ficiency, rjd^ and the measurement efficiency, rjm = VcVd 
are also identical in all setups. To get the most out of 
our channel and detectors, we may need to use frequency 
up-converters or down-converters at the level of a single 
photon [15] . We assume that the efficiency of such mod- 
ules are also included in r]m or path loss. In Fig. [l] these 
loss effects are modeled by relevant beam splitters. All 
photodetectors in Fig. [l] have then unity quantum effi- 
ciencies. We furthermore assume that the dark current 
is negligible in all our photodetectors. 

The achievable throughput for DLCZ protocols is com- 
monly restricted by the probabilistic nature of its en- 
tanglement distribution and connection schemes. Let us 
consider the particular case of the DLCZ QKD protocol, 
which relies on two entangled pairs. The establishment 
of entanglement between A and 5, in Fig. flic), is not 
necessarily coincident with the establishment of entan- 
glement over C and D. Hence if we use only two pairs 
of memories, we have to wait until we have two entan- 
gled pairs, and that reduces the rate. In order to get the 
most out of employed memories, we can employ a large 
number of logical memories in a parallel cyclic way as 
explained in [4 . By using a large number of memories at 
each site in parallel, we minimize the waiting time, and, 
therefore, maximize the rate. By using a cyclic protocol, 
we reuse memories as soon as they become available, and 
that increases the efficiency of our system. Throughout 
the paper, we assume the employment of a large number 
of memories per node. Given that each ensemble can be 
used as multiple logical memories, the number of physi- 
cal systems required could be much fewer than the logical 
ones. By using a large number of memories, we also min- 
imize the constraints on the coherence time of employed 
memories [5j. 

In what follows, we first review the performance of the 
DLCZ scheme for entanglement distribution reported in 
pT] . and extend their results to the case of the DLCZ 
repeater. Then, we find the key generation rate for the 
DLCZ QKD protocol using entangled pairs created either 
directly by the DLCZ entanglement distribution scheme 
or by a single-hop repeater system. 



III. PERFORMANCE ANALYSIS: 

ENTANGLEMENT DISTRIBUTION 

In this section, we first review the results reported in 
[TT] for a single DLCZ link, and then extend them to the 
case where one repeater node is used to create entangle- 
ment between the remote parties. 
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A. DLCZ entanglement distribution: A revieAv 
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In [TT], the joint state of A and B in Fig. UJa), p 
after a heralding event at I^j, j = 1, 2, is obtamed. Here, 
we use the Fourier relation between a density operator 
and its anti-normally ordered characteristic function to 
rewrite p^^ in the following form: 



pr 



d^A fd'C. 



Xa 



{Ca,Cb)Dn{Sa,-Ca) 
xZ)^(5b,-Cb), (1) 



where, for a complex variable C = Cr + Ki with (r 
and Q being real numbers, J (PC = /^ <^Cr /^ <^Ci ^ 

DN{aX) = ^^^ e~^ ^ is the normally ordered displace- 
As 

ment operator for an annihilation operator a, and Xa 
is the anti-normally ordered characteristic function for 
pf^' For a composite system of harmonic oscilla- 
tors Ai, . . . , An, with respective annihilations operators 
ai, . . . , ttn, the anti-normally ordered characteristic func- 
tion for p^i v,^n^ ^]^g joint state of the system, is defined 
as follows 



x'a 



(Cl,...,Cn) = ( n ^^(«"0)), (2) 



i=l,...,n 



where Da{ol^ C) = e~^ ^e^^ is the anti- normally ordered 
displacement operator for an annihilation operator a. We 
use a similar notation throughout the paper for relevant 
characteristic functions appearing in our analysis. Using 
Eqs. (20) and (25) in fTT along with Eq. ([2|, we obtain 

xi\u.CB) = exp[-a(|CA|' + |CB|')]x 

(l-ia|a + (-l)^'CBp),PNRD(3) 



FIG. 2: (Color online) Partial Bell-state measurement (BSM) 
by linear optics. This is a common module in all DLCZ pro- 
tocols in which the collective states of two atomic ensembles, 
X and y, are transferred to optical modes via a retrieval pro- 
cedure [9]. The resulting optical modes interfere at a 50-50 
beam splitter before being detected by two single-photon de- 
tectors. In our BSM model, we denote the atomic-to-photonic 
conversion efficiency by rjc and the photodetectors' quantum 
efficiencies by rfd- The single-photon detectors in the figure 
then have ideal unity quantum efficiencies. X' and Y' denote 
the optical modes entering these ideal photodetectors. 



channel transmissivity in Fig. 1(a) with Latt being the 
channel attenuation length and Lxy denoting the dis- 
tance between any two ensembles X and Y . The main 
assumption in the above equations is that the employed 
setup is symmetric, i.e., the excitation probability Pc? the 
path loss and all relevant quantum efficiencies as well as 
incurring phase shifts are identical for all parties involved 
in the protocol. 

For symmetric setups, the average fidelity of entangle- 
ment generated by the DLCZ entanglement distribution 
scheme is given by [11 
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The probability of heralding success for the above DLCZ 
entanglement distribution is given by [TT] 
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Vf^Pc + ^—Pc 
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rjdV is the total system 



efficiency. Here, r] = ex.p{— {Lab/ ^2)/ Latt) represents the 



B. DLCZ Repeater Protocol 

The single-hop DLCZ repeater protocol works as fol- 
lows. In order to create entanglement over distance L, 
the entire link is split into two segments of length L/2 as 
shown in Fig. [lib). Using the DLCZ protocol described 
in Fig. Ilia), we first distribute entanglement between 
A&lA^ and BhB' ^ and, then — only after we learn about 
the establishment of entanglement on both links — we per- 
form a partial BSM on optical modes that are retrieved 
from ensembles A' and B'] see Fig. |2j 



In this section, we find the generation rate and the 
fidelity of entangled ensembles created over distance L 
using the DLCZ quantum repeater of Fig. [lib) in differ- 
ent scenarios. The methodology we use here is similar 
to that of [11^ in that we first find the relevant charac- 
teristic functions for the state on which the BSM will be 
performed. Rate and fidelity can then be calculated in 
terms of integrals with Gaussian integrands, for which 
analytic results are obtained using the symbolic software 
Maple. Such results are commonly too lengthy to be pre- 
sented in their explicit forms, and here we leave them in 
their compact integral forms. 

After the establishment of entanglement on the sub- 
links AA^ and BB\ the initial joint characteristic func- 
tion of AA'B'B is given by 



Xa 



'"' (CaXbXcXd) 



Xa 



{CaXb)x'I \CcXd). 



(8) 
where pf^f^'^ = pf^' pf^, j,k = 1,2, is the initial 

joint state of the four ensembles, and Xa ^^^ Xa 
can be obtained from Eqs. ([3| and Q. 

In order to perform a BSM on A^ and B\ in the DLCZ 
protocol, the states of these ensembles are transferred, 
using retrieval pulses [9j, to optical modes on which a 
partial BSM is performed. Such a partial BSM has been 
schematically shown in Fig.[2]for two general input modes 
X and Y. Here r]c models the efficiency of atomic-to- 
photonic conversion, and rjd is the quantum efficiency of 
photodetectors. The photodetectors in Fig. [2] are then 
assumed to have ideal unity quantum efficiencies. We 
assume that the coupling and quantum efficiencies are 
identical for both paths. The effect of the measurement 
module in Fig.|2]on the input-output characteristic func- 
tions is given by pjj: 

xf^'iCxXr) = x'riVv~cCx,Vv~c(:f)B{Cx,CY), (9) 

where p^^ and p^ ^ are, respectively, the state at the 
input ports X and F, and the state right before ideal 
detectors in Fig. [2J and 

BiCxXr) = exp[-(l-%)(|Cx|' + |Cy|')] 

X exp[-(l-r?e)(|Cxl' + lC^n] (10) 



with 
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Cx) and C^ = ^J^ 



(Cy + Cx). (11) 



In the repeater of Fig. [T]^b), optical modes retrieved 
from ensembles A' and B' go through a similar transfor- 
mation to Eq. |9|. Hence, for the resulting optical modes 
A^^ and B^\ we obtain 

x'F " "(a,Cx,Cy,CB) = B(Cx,CF)x 

x''r^\cA,Vv'cG,Vv'cC^,CB), (12) 



where p^^ ^ ^, j, /c = 1,2, is the joint density matrix 
of ensembles A and B and optical modes A^' and B^^ in 
Fig.gb). 

The measurement operators in the repeater scenario 
are 

Mi=|1)^.m-(1|^|0)b-b-(0| 
M2=|O)a-a-(O|0|1)b^^b-(1| (13) 

for the PNRD case, where M^, i = 1,2, corresponds to a 
single click on detector Di, and |z)x, i = 0, 1 and K = 
A"^B"^ represents a Fock state for the optical mode K. 
Similarly, 

M^={lA"-mA"A"m^\^)B"B"{^\ 

M2 =\^)a"A"{^\ ^ {Ib" - |0)b-b-(0|) (14) 

for the NRPD case, where Ik-, K = A"^B"^ represents 
the identity operator for mode K. 

The final state of ensembles A and B will then be given 

by 



AS _Tr,„,„(M.p^4fB"B) 



Pij.k 



pBSM 



where 



AA''B''B 
Pj,k 



z,j,fc = l,2, (15) 



d'CB 



. fd^ fd^ ffC^ f 

J ^ J TT y IT J 

AA" b" B 

xXa' {UXa"Xb"Xb) 

X Dn{Sa, -CA)DN{aA",-CA") 

X DN{aB",-CB")DN{SB, -Cb), (16) 



where a^, K = A" ^ B'\ is the annihilation operator cor- 
responding to the optical mode K^ and 



pBSM 
^h3,k 



TT{M,pf^^^ ^)^Pm/2 



(17) 



is the probability that only detector D^, i = 1,2, clicks 
in the BSM module. Because of the symmetry of our 
setup, this probability is independent of indexes i, j, and 
/c, and it is half of the total BSM success probability Pm- 
Similar to Eq. ([s]), we can define the fidelity for the final 
state as follows 

PaI = 1 E AB{^f^'Uk\ptf,k\^f^Hk)AB. (18) 
i,j,/c=l,2 



Given that the characteristic function in Eq. (12) has a 



Gaussian form, the above quantity can be turned into 
a Gaussian integral by plugging the following identities 
into Eqs. (15)-(18). For any single- mode annihilation 



operator a and complex variable (", we have 

(0|Z)yv(a,C)|0) = 1 , (l|D,v(a,C)|l) = 1 - ICl' , 



'TT[DM{a,0]=7^S{C), 



(19) 



and, for any two ensembles A and 5, we have 



1 



\CA + {-iyci 



(20) 



As mentioned earlier, we use Maple to analytically sim- 
plify the resulting Gaussian integrals. The final result is, 
however, too long to be presented here. 

The fidelity obtained from Eq. (18) never exceeds 
l/{2-r]m) for PNRDs and 1/(2-7^^/2) for NRPDs [11], 
and, therefore, at r^^ = 0.35, is substantially lower than 
that of direct entanglement distribution in Eq. (|6|; see 
Fig. [sFa). That is because the DLCZ repeater scheme 
is a conditional protocol. It can purify itself only after 
post-measurement processing. 

The main reason for the low fidelity of the DLCZ re- 
peater is due to circumstances in which ensembles A' and 
B' each hold an excited atom, whereas ensembles A and 
B are in their vacuum states. In such a case, it is still 
possible that, in the presence of loss in the BSM module, 
we observe a single click on only one of the detectors, 
while the remote ensembles A and B are left in the state 
\00) AB- Ideally, such a vacuum state does not produce an 
error in the DLCZ QKD scheme because we need a mini- 
mum of two excitations in the four ensembles of Fig. flic) 
to create one bit of the sifted key. It will be interest- 
ing then to look at the conditional fidelity when the final 
state is non- vacuum. 

Suppose, we have performed a certain measurement by 
which we have learned that the joint state of AB is non- 
vacuum. Such a purified density operator is then given 

by 



AB, purified 



{I - mABABm)ptf^{i - mABABm) 



Tr[(/ - \00) ABABm)pff^^{I - \00) ABABm)] ' 

The fidelity of this new purified state will be given by 



(21) 



F 



(2) 



AB, purified 



E//,Bell I AB, purified I /Bell \ 



(22) 



,j,/c=l,2 



and the conditional probability that only one of the BSM 
detectors clicks, given that the final state of A and B is 
non- vacuum, is given by 



ppurified p 



M 



E ^M, 



AA"B"B 



= 1,2 



Mi\00)ABABm). 

(23) 

Figure IsFa) compares the fidelity of the direct DLCZ 

entanglement distribution given by Eq. (p| with three 

repeater scenarios. The first scenario is for the fidelity 

of the DLCZ repeater, given by Eq. (18), without con- 



sidering its post-measurement self-purification property. 
As discussed before, this fidelity cannot be larger than 
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FIG. 3: (Color online) (a) Fidelity versus distance, for ensem- 
bles A and B of Figs, ma) and (b), in different scenarios us- 
ing PNRDs (solid) and NRPDs (dashed). The "no repeater" 
curves represent the fidelity of the direct DLCZ entanglement 
distribution, F^^, given by Eq. (pk. The "repeater, no purifi- 
cation" curves are obtained from Eq. ( |18[ ), and the "repeater 
with purification" curves are obtained from Eq. (22 ), when we 
exclude |00)as by post measurement. The final pair of curves 
represent the fidelity of entanglement assuming that the ini- 
tial entangled states of AA' and BB' are Werner states with 
fidelity Fj^J^, = F^b' ' ^^^ ^^^^ ^^^ employed BSM module is 
deterministic and error free, (b) The probability of herald- 
ing success for a DLCZ link that uses no repeater operation, 
Ps{L), the one with one repeater node but no purification, 
Ps{L/2)Pm, and the one with one repeater node and self- 
purification, Ps{L/2)Pf^^^ ^ . Again, plots with solid lines 
are for PNRDs and those with dashed lines are for the NR- 
PDs. The parameter values, used in both plots, are pc = 0.01, 
rjd = 0.5, rjc = 0.7, and Latt = 25 km corresponding to 0.17 
dB/km loss in optical fibers. 



1/(2—7^^), and, for our employed parameters, it is around 
0.6. However, if we assume that we can exclude the vac- 
uum case later by post-measurement processing, the fi- 
delity, given by Eq. (22), rises to about 0.95 and higher 
depending on the total distance; see the curves labeled 
"repeater with purification" in Fig. p[a). The latter 
curves are still below that of the direct DLCZ link. This 
is to be expected because in the repeater protocol we 
start with non-ideal entangled states. In fact, even if we 
have an ideal error-free BSM module, and assuming that 



the initial fidelity Fj^J^, = F^^, — F corresponds to a 
Werner state, the fidelity of the entangled state of A and 
B after the ideal BSM goes down to l/4+(4/3)(F-l/4)2 
[3^; see the curves labeled "ideal BSM, Werner-state in- 
put" in Fig. [3]^ a). The entangled state obtained by the 
DLCZ protocol is not a Werner state, and therefore, its 
fidelity drop cannot be modeled that way. The fidelity 
drop in the DLCZ case is slightly less than that of the 
Werner-state model as shown in Fig.|3|a). This improve- 
ment, however, is at the price of achieving a lower success 
rate due to employing a partial probabilistic BSM mod- 
ule in the DCLZ protocol. 

Figure (sjb), shows the probability of heralding suc- 
cess in the two cases of with and without repeater. The 
heralding probability, in the repeater case, is defined as 
the product of Ps{Faa') = Ps{Lbb') = Ps{L/2), given 
by Eq. ([7|), for the initial entanglement distribution, and 
the BSM success probability, Pm or P^^^ ^ , given, re- 



spectively, by Eqs. ( |17| ) and ( |23[ ). It may seem, at the 
first glance, that the success rate in the quantum repeater 
case is proportional to Ps{Laa') x Ps{Lbb')- It is not, 
however, the case because in a repeater setup, we do not 
perform the BSM before learning that the initial entan- 
glement distribution has been successful on both links. 
On both AA' and BB' links, it takes on average about 
1/Ps{Laa') = ^/Ps{Lbb') trials before they can per- 
form the BSM on A' B' ensembles. This descriptive ar- 
gument can be made precise if we assume that at the end 
of each link, there is a bank of sufficiently large number of 
memories, on which this procedure is being successively 
attempted in parallel [4 . Under this assumption, it can 
be seen that, although, for short distances, the direct en- 
tanglement distribution has a better success rate, there 
is a crossing point at which the repeater protocol gen- 
erates a higher number of entangled states. Notice that 
the quality of the entangled states generated by the re- 
peater is lower than that of the DLCZ link. We deal with 
this issue and its implications on the rate later when we 
deal with a practical application, namely, QKD, in the 
following section. 

In Fig. [3j we have considered both cases of using PN- 
RDs and NRPDs. As can be seen in Fig. IsFa), there 
is only a slight advantage in using resolving photodetec- 
tors for the purpose of entanglement distribution. For 
a fixed value of Pc, and at long distances, the fidelity in 
both cases approaches a similar constant value mostly 
determined by Pc- The heralding probability, however, is 
slightly higher in the NRPD case, and that is because, 
with NRPDs, two photons can masquerade themselves as 
a single photon. Such a scenario mostly occurs when the 
two middle ensembles hold two excited atoms altogether, 
and the remote ensembles are in their vacuum states. By 
excluding the vacuum state from the final state of the 
remote ensembles, our purified heralding probability is 
much less dependent on the type of employed detectors 
as shown in Fig. p[b). 



IV. PERFORMANCE ANALYSIS: QUANTUM 
KEY DISTRIBUTION 



In this section, we obtain the secure key generation 
rate for the system shown in Fig.mc) in two cases. First, 
when the initial entangled pairs are obtained from the di- 
rect DLCZ link of Fig. Ilia), and, second, when the DLCZ 
repeater of Fig. [lib) is used. We use the same method- 
ology as in the previous section by finding the relevant 
characteristic functions from which the final density ma- 
trices can be found. Any statistical moments of interest 
can then be written as Gaussian integrals. The final ana- 
lytical results obtained by this method are, however, too 
long to fit in the paper and will be omitted. 

The secure key generation rate is the product of three 
terms: the generation rate of entangled states to be em- 
ployed in the QKD protocol, the probability that an ac- 
ceptable click pattern occurs upon QKD measurements 
(denoted by Pciick later in this section), and the ratio 
between the number of secure key bits and the sifted 
key bits. To obtain the first term, we use the results 
of [4 for the case of infinitely many memories, which 
states that for a quantum repeater with nesting level 
n, the generation rate of entangled states is given by 



Ps(L/2»)pWpi^). 



•P^7(2L/c), where c is the speed 

of light in the channel and P^ , i = 1, . . . , n, is the BSM 
success probability at nesting level i. In our case, Ps 
and Pm were found in the previous section. To calculate 
the last term, we use the Shor-Preskill lower bound for 
the ratio between the number of secure key bits and the 
number of sifted key bits, in the limit of an infinitely long 
key, as given by [16] 



i?QKD = l-2i/(QBER), 



(24) 



where QBER is the quantum bit error rate, and H{p) = 
—p log2 p — (1— p) log2 ( 1 —p) . The main assumption in de- 
riving Eq. ( 24 ) is that the QKD measurements are being 



performed on qubits. This assumption does not hold in 
our case because we are measuring infinite-dimensional 
optical modes, which cannot necessarily be modeled by 
qubits. It has recently been shown, however, that by us- 
ing squashing techniques, the same key rate is achievable 
in our case as well [17]. We then just need to obtain 
QBER and Pciick to find the key generation rate as ex- 
plained in the following. 



A. DLCZ QKD with no repeater 

Having entangled two pairs of ensembles, namely A, B 
and C, D, via the DLCZ entanglement distribution pro- 
tocol of Fig. flla), the initial joint characteristic function 
of these four ensembles is as follows: 

ABCD AB CD 

Xa {U,C,b, Cc, Cd) = Xa (Ca, Cb) X Xa (Cc, Cd), 

(25) 
where pf^^^ = pf^ (g) p^^, j = 1, 2, is the initial joint 
state of the four ensembles. In the DLCZ protocol, the 



atomic states are transferred to photonic states on which 
Ahce and Bob perform their random QKD measurements 
by applying random phase shifts. Because they later 
discard the measurement results obtained from different 
phase shifts, we only consider the case where both Alice 
and Bob have chosen zero phase shifts. Under this as- 
sumption, the measurement modules on Alice and Bob's 
setup are identical to the one in Fig. |2| and we can apply 
the transformation in Eq. (I9|) to obtain 



p' 

XA 



a' b' c' d' 



(UXbXcCd) = BiU,Cc)BiCB,CD)x 



Pj 

Xa 



iVv~cC 



A' ■ 



/v^Cb^Vv^Cc^Vv^Cd)^ (26) 



where ("^ {(^) and CciCo) ^^^ ^^ obtained from Eq. ( 11 ) 
by replacing X with A{B) and Y with C{D). The den- 
sity operator p^ ^ ^ ^ represents the state of the optical 
modes right before their being detected by the ideal sin- 
gle photon detectors in Fig. 1(c), and is given by 

^A'B'C'D' ^ f d^A f d^B f d\c f d^D 

^ J TT J IT J IT J TT 



a' b' c' d' 



xXa (C^,Cb,Cc,Cd) 

X DN{aA' , -CA)DN{aB' , -Cb) 
X DN{ac' , -Cc)DN{aD' , -Cd), 



(27) 



where a^, K = A' ^B' ^C ^D' ^ is the annihilation opera- 
tor corresponding to the optical mode K. 

We use measurement operators to model the relevant 
QKD measurements. The most general measurement op- 
erator for the PNRD case is given by 



Ma. 



bed 



\a)A'A'{a\ ® \h)B'B'{h\ ® \c)c'C'{c\ ® \d)D'D'{d\, 

(28) 
for a^h^c^d = 0,1, where \k)K represents a Fock State 
for the optical mode K = A\B\C\D\ In the case of 
NRPDs, we only need to replace \1)kk{M with {Ik — 
|0)kk(0|), for K = A',B',C',D', where Ik is the iden- 
tity operator for system K. 

Let us consider the case of j = 1 and denote the prob- 
ability that Mabcd occurs by 



abed 



Tvipt 



A'B'C'D' 



M, 



abed) 



(29) 



Such probabilities can be calculated using the Gaussian 
integral techniques along with Eq. (19). Because of the 



symmetry assumption, the case of j = 2 will provide us 
with the same result in the end. The QBER is then given 

by 



QBER = 



click 



(30) 



where 



-^click — 

f ^1001 + ^0110 + ^1010 + ^0101, PNRD, 

\ 1 — ^1000 — ^0100 — ^0010 — ^0001 — ^0000, NRPD, 

(31) 



is the probability of getting at least one click on each 
side, and 



^1001 + ^0110, 
^0110 + 9^0111 + 2^1011 

o Am, 



"2^101 + 2^1110 



PNRD, 

Pevvov = \ A 001 

NRPD, 

(32) 

is the probability of making an error, i.e., Alice and Bob 
assign different bits to their sifted keys. In the PNRD 
case, we only count cases where exactly one photon has 
been detected [18]. So, a bit error occurs whenever there 
is a mismatch between detectors that have clicked. In 
the NRPD case, we have to only consider the double- 
click cases, where we assign a random bit to the sifted 
key. The terms that start with a 1/2 factor account for 
the probability of error in the double-click cases. 

Assuming that the DLCZ protocols for entanglement 
distribution and QKD are being successively applied, 
with period L/c, to a large number of memories, the 
number of secure key bits generated per second per logi- 
cal memory used in the system is lower bounded by [4^ 



Ri 



1 - 2JJ(QBER) 

2L7c 



Ps{L) ■ Pciick/2. (33) 



In the above equation, Ps{L)/{2L/c) is the generation 
rate of entangled pairs per logical memory, Pciick/2 rep- 
resents our likelihood of creating a sifted key bit by us- 
ing two entangled pairs, and 1 — 2i7(QBER) represents 
the number of secure key bits created out of each sifted 
key bit. Here, we have neglected the cases where Alice 
and Bob choose different phase shift values. It has been 
shown that in order to detect an eavesdropper, it suf- 
fices for Alice and Bob to use different phase shifts with 
a probability that can approach zero [19 . How, in prac- 
tice, this probability is chosen depends on the employed 
privacy amplification and reconciliation protocols. 



B. DLCZ QKD with One Repeater Node 



Suppose the entangled states of AB and CD^ in 



Fig. 
Fig. 



I'c), are provided by the DLCZ repeater scheme of 
1 ^b). In order to find the rate, similar to the previ- 
ous section, we first need to find the initial characteristic 
function for the composite system of ensembles A, 5, C, 
and D. That will be given by 

x''F-^\u,(:b,Cc,(:d) = x'F-''{u,(:b)xx''F-'{(:c,Cd), 

(34) 

^AB 



where p^^^^ 

tial joint state of the four ensembles with pff/. given 



'i,j,k - P?Xk ^ ^ijVc' ^'-^'^ = ^'^' ^^ ^^^ ^^^" 

AB 



by Eq. (15). Here, for simplicity, we assumed that the 



original entangled states are identical for both AB and 
CD systems. Other cases can be converted to this case 
by applying a local unitary operation. The next step 

is to calculate Xa^^^ [CaiCb)-, which will be dealt with 
in Appendix. The rest of the rate analysis then follows 
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FIG. 4: (Color online) (a) The number of secure key bits 
generated per second per logical memory for a DLCZ QKD 
system, with {R2) and without (Ri) a repeater node, versus 
Pc at L = 350 km. There exists an optimum value of pc at 
which the QKD rate peaks, (b) Optimum value of pc ver- 
sus distance. For large distances, roughly greater than 100 
km, this optimum value approaches a constant value in each 
configuration. In (a) and (b), solid lines are for PNRDs and 
dashed lines are for NRPDs. The parameter values, used in 
both plots, are r]d = 0.5, r]c = 0.7, and Latt = 25 km and 
c = 2 X 10^ m/s for the optical fiber channel. 



from Eqs. (26)-(32) with obvious replacements and will 



be omitted. Again, under the assumption of large num- 
ber of memories and parallel successive entangling at- 
tempts, the number of secure key bits, in the limit of 
long key, generated per second per logical memory used 
in the system is lower bounded by 



R2 



1 - 2iJ^(QBER) 

2L/~c 



•Ps{L/2)-PM-PciicU2. (35) 



C. Numerical Comparison 

In this section we compare the normalized rate given 
by Eq. (33) for the no-repeater QKD link with that of 
Eq. (35) for the single-hop repeater configuration. We 



find the dependence of Ri and R2 on various system pa- 
rameters such as the excitation probability Pc, the total 
distance L, and the measurement efficiency 7]^- 

Figure [4Fa) shows Ri and R2 as functions of the ex- 
citation probability, Pc^ for a 350-km-long optical fiber 
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FIG. 5: (Color online) (a) QBER versus distance for the 
DLCZ QKD protocol, with and without repeater, at pc — 
0.0055. At an identical value for pc, the repeater systems un- 
dergo higher error rates. This is also the case for systems that 
use NRPDs (dashed lines) rather than PNRDs (solid lines). 
(b) QBER versus distance for the DLCZ QKD protocol, with 
and without repeater, at the optimum values of pc- QBER is 
about the same for all configurations. The parameter values 
used in both plots are rfa — 0.5, rfc — 0.7, and Latt — 25 km. 



channel with 0.17 dB/km loss. It can be seen that 
there exist optimum values of Pc at which the QKD rates 
peak. That is because, whereas a higher value of Pc in- 
creases the heralding rate of success, it also creates more 
multiple-excitation errors, which, in turn, reduces the 
rate. The optimum value of Pc for the repeater setup 
is lower than that of the no-repeater case. It is also lower 
for non-resolving detectors than the resolving ones. That 
is because with the repeater system, or, with the non- 
resolving detectors, we create more errors in the entan- 
glement swapping/distribution steps, hence we are better 
off to start with a lower value of Pc to allow for a higher 
margin of error by the end of the QKD procedure. 

The optimum values of Pc are functions of distance as 
well. Figure [4Fb) shows such dependence for resolving 
and non-resolving detectors with and without a repeater 
node. It can be seen that, whereas, for short distances, 
a higher value of Pc is desired, the optimum value of 
Pc approaches a certain value in the limit of long dis- 
tances. For our parameter setting, with nominal values 
of 7^(i = 0.5 and r^c = 0.7, the optimum values are roughly 
constant for L > 100 km. These long-distance-limit opti- 
mum values are Pc = 0.0243 and Pc = 0.0194 for the no- 
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repeater case using, respectively, PNRDs and NRPDs, 
and Pc = 0.0060 (PNRD) and Pc = 0.0049 (NRPD) for 
the configuration with one repeater node. 

The asymptotic behavior of the optimal value of Pc is 
a result of the compromise between two competing terms 
in Eqs. ([33| and (R2). The first term is 1 - 2i:f (QBER), 
which is a decreasing function of Pc as higher values of Pc 
increase the chance of multiple excitations. The second 
important term is the heralding probability P^, which is 
an increasing function of Pc. The optimum value of Pc is 
where these two competing factors balance each other. 

Figure [sja) shows QBER versus distance at Pc = 
0.0055. As expected, at an identical value of Pc^ the error 
rate for repeater systems is higher than the no-repeater 
ones. NRPD-based systems are also more prone to cre- 
ating errors than the systems that use PNRDs. At short 
distances, the QBER is less than its asymptotic limit 
at long distances, which is because the fidelity decreases 
with distance; see Fig. [sj^a). This lower error will enable 
us to increase Pc to achieve a higher rate at lower dis- 
tances. That explains why the optimum value of Pc in 
Fig.[4]^b) is a decreasing function of distance. By increas- 
ing Pc to its optimum value at each distance we expect to 
get a flat curve for QBER, as shown in Fig. jslb). Inter- 
estingly, QBER is about the same for all configurations 
if we use the corresponding optimum value of Pc for each 
setup at each distance. It is higher, however, for NRPD- 
based setups as compared to PNRD-based ones. 

Finally, Fig. JGJ^a) shows Ri and R2 versus distance. 
Each point on the graph is calculated at the correspond- 
ing optimum value of Pc. Because the optimum is almost 
identical, at long distances, for both repeater and non- 
repeater setups, the former eventually outperforms the 
latter, because of its higher efficiency at long distances. 
For the parameters used in our calculations, the cross- 
over distance, i.e., the distance beyond which the re- 
peater setup outperforms the direct DLCZ link, is around 
350 km. Note that because we are looking at normalized 
rates, the cost of extra memories used in a repeater setup 
is also included in our comparison. It is interesting to 
note that this cross-over distance for the QKD case is 
almost twice as large as what we found for the herald- 
ing probabilities in Fig. [sFb) . While it is an unexpected 
result, it shows the importance of including the actual 
application in mind when such cross-over distances are 
calculated. 

The cross-over distance also determines the optimum 
distancing between quantum repeater nodes. The latter 
depends on the BSM success probability Pm^ which is a 
function of our measurement efficiency 77^- Figure loFb) 
shows the cross-over distance versus r]rn for ^1 and R2 
calculated at the optimum values of Pc. For highly ef- 
ficient BSM modules, this distance will drop to about 
200 km as shown in Fig. p[b). That is about 100 km 
between each repeater station. This is a characteristic 
of quantum repeater systems with probabilistic compo- 
nents, which tend to have only a few intermediate sta- 
tions as compared to systems that rely on deterministic 
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FIG. 6: (Color online) (a) The number of secure key bits gen- 
erated per second per logical memory used in the DLCZ QKD 
protocol, with and without a repeater node, versus distance at 
the optimum values of pc- The cross-over distance, Lcross, be- 
yond which the repeater system outperforms the no-repeater 
system, has been shown for both NRPD-based (dashed) and 
PNRD-based (solid) systems at rid = 0.5 and r]c = 0.7. (b) 
The cross-over distance as a function of the measurement ef- 
ficiency, ?7m, for the repeater BSM module. For the initial 
entanglement distribution, r/d = 0.5. With higher values of 
?7m, the BSM success probability improves, and therefore the 
optimum distancing between repeater nodes will decrease. In 
both plots Latt = 25 km and c = 2 x 10^ m/s. 



BSMs. The key generation rate is almost linearly grow- 
ing with the number of logical memories employed [5]. 
According to Fig.JG^a), to create 1 kbps of secure key, at 
r]m = 0.35, over 400 km, we need a total of about 30,000 
logical memories for the DLCZ system. That could trans- 
late into 300-3000 physical memories in the system. 



V. CONCLUSIONS 

Quantum communication systems that rely on proba- 
bilistic schemes for entanglement distribution and swap- 
ping provide us with a practical route towards long- 
distance quantum cryptography. In the scheme proposed 
by Duan, Lukin, Cirac, and Zoller, the interaction of light 
with the memory is enhanced via a collective excitation 
process. Multiple excitations are then the fundamental 
sources of error in such systems. In this paper, we con- 
sidered the DLCZ proposal for quantum repeaters and 
quantum key distribution and calculated the generation 
rate of secure key bits per logical memory used in the sys- 
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tern. The number of employed memories is a measure of 
cost in quantum repeaters. It turned out that in order to 
obtain the maximum rate for such systems, the cohective 
excitation probabihty must be tuned to an optimal value. 
Such an optimal value was not sensitive to the total dis- 
tance in the limit of long distances. We also compared 
the key generation rate for a DLCZ system that used 
a quantum repeater node for entanglement distribution 
with a direct no-repeater DLCZ system, and found the 
cross-over distance beyond which the quantum repeater 
outperformed the no-repeater system. The cross-over dis- 
tance was about hundreds of kilometers, and that would 
vary depending on the efficiency of system components. 
That implied that probabilistic quantum repeaters might 
only need a few intermediate stations for entanglement 
swapping. That could reduce the cost of implementing 
such systems and increase their compatibility with cur- 
rent optical infrastructure. Another cost-saving observa- 
tion was the fact that using photon-number resolving de- 
tectors only slightly improved system performance, and, 
any practical system could rely on non-resolving photode- 
tectors at no appreciable loss in efficiency. To obtain a 
reasonable key rate, however, a large number of logical 
memories was required in each station. 



where 



Cl =[Pc{r]s - 1)(-1 - VmPc^Pc - VsPc + VmVsPcf]/ 

[{2r]sr]mPc - "^VmPc + r?m - 2 + 2pc - 27/sPc) 
(1 + r]sPc - Pcf{2r]lr]mPl - ^VsVmPl + "^Vmpl^ 
VsrimPc - VmPc - "^tiIpI + Ar]spl - VsPc - '^pI 

+ Pc + 1)] 
C2 =[-Pc{Vs - 1)(-1 - VmPc^Pc - VsPc + VmVsPc)]/ 

[(1 + VsPc - Pc){'^rilr]mPl - ^VsVmPl + '^rjmPl^ 
VsrjmPc - VmPc - "^tiIpI + Ar]spl - VsPc - '^pI 

+ Pc + 1)] 
C3 =[-(-1 - VmPc^Pc - VsPc + VmVsPc)]/ 

[2{2r]sVmPc - ^VmPc ^Vm-^^^Pc- ^VsPc) 
{2rilr]mPl - ^VsVmPl + "^VmPl + VsVmPc 

^99.. 9 ^ 9 . 



-VmPc 



- 2r]lpl + Ar]sPl - VsPc - "^pI +Pc + 1)]: 

(A. 



2) 



and ris = vt^' ^ and for the NRPDs 
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Pi,j,k / 



= ci exp(pi(|CA|' + ICbI') +P2{\Ca + {-ly^'^'XBl')) 

+ C2exp(pi(|CA|' + |CB|')) + C3exp(p3|CA|'+P4|CB|') 

+ C4exp(pi|CA|^ +P4|Cb|^) +C3exp(p4|CA|^ +P3|Cb|^) 

+ C4exp(p4|a|' +Pi|Cb|') +C5exp(p4(|a|' + ICsl')), 

(A.3) 



where 



Appendix 



In this Appendix, we obtain the characteristic func- 
tion for the output state of the DLCZ quantum repeater, 
pffk^ as given in Eq. (15). Using the general defini- 
tion of Eq. ([2| and the identity TT{DA{a, C)^iv(«, O) = 
7r6{(-\-(^)^ after some algebraic simplification, we obtain 
for PNRDs 



Xa 



'-'''' (CaXb) 



TT{ptf,DA{SAXA)DA{SBXB)) 



= exp[-a(|CAp + |CBp)][l + Ci|aPlCBp 

+ c2{\Ca\' + \Cb\') + cs\ca + i-iy^'^'CBi'] 



(A.l) 



Pi ={-VsPc + VsVmPc - '^VmPc + ^Pc " 2)/ 

{2r]mPc - VsVmPc + 2 - 4pc + 2r]sPc - 2r]spl + 2p^ 

+ 2r]sVmPl - '^VmPl) 
P2 =(7?^7?mPc)/[4(-l +Pc)(l + VsPc-Pc){'^VmPc " VsVmPc 

+ 2r]sVmPl - ^VmPl + 2 - 4pc + 2r]sPc - 2r]spl + Pc)] 
Ps ={^pIvs + ^PcVsVm - ^VsVmPl - 4 - 2r]lpl - 6r]sPc 
+ 4r]mPl - ^VmPc + '^rj^sVmPl - ^pI + 8pc)/ 

((1 + r]sPc - Pc){-^sVmPc + ^VmPc + 4 - 8pc 

+ 4r]sPc - ^VspI + ^pI + ^VsVmPl - ^VmPl)) 

-1 



P4 



1 + VsPc - Pc 



(A.4) 
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and 

ci H-'^i-^ ^ Pc){l ^ rjsPc - Pcf)/{r]y,{2r]mPc 
- VsVmPc + 2 - 4pc + "^VsPc - "^VspI + 2p^ 
^2r]sr]mPl -2r]mPl)) 

C2 =(-4(-l +Pc)(l + VsPc - Pc)^(-1 - VsPc + 2pc 

+ VspI - pl))/{r]lpl{2r]rnPc - VsVmPc + 2 - 4pc 
+ 2r]sPc - 2r]sPl + ^vl + 2r]sr]mPl - 2r]mPl)) 

C3 =(-4(1 + 7?.Pc -Pc)'(-1 +Pc)')/(^.'P^ 



{-^sVmPc + 47^mPc + 4 - 8p 

+ 4pl + 4r]sVmPl - ^VmPl)) 



^VsPc - ^VsPc 



- VsVmPc + 2 - 4pc + 2r]sPc - 2r]spl + ^pI 
-^2r]sr]mPl -2r]mPl)) 

C4 =(-2(1 + r]sPc - Pcf{-^^Pcf)/{{2r]mPc - VsVmPc 
+ 2 - 4pc + 2r]sPc - 2vspI + 2pl + 2r]sVmPl 

- 2VmPl){-l - VsPc^Pc + VsVmPcVmPcWsPl) 
C5 =(-(l+^sPc-Pc)(-l+Pc)^^m(^s - 1))/ 

(^sPc(-l - VsPc^Pc + ^s^mPc - VmPcf)' (A.5) 
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